You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
Git IntegrationArea: what it touches
Bug FixesKind: in v2.1.234,
Bug FixesSection of the release
What
Both remote-URL matchers were narrowed so a crafted remote cannot make Claude Code derive the wrong owner/repo identity. The host capture now excludes / and @, and the userinfo capture excludes @, /, ? and #. Applies to everyone.
Details
Covers the scp-style form (git@host:owner/repo.git) and the URL-style form alike.
Evidence
[^@/?#]*@, /^git@([^:/@]+):(.+?)(?:\.git)?$/
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
